security-scanner

Detect web application vulnerabilities and severity levels via URL scans.

Updated Jun 10, 2026
One-click install
npx skills add https://github.com/w020316/Khazix-Skills --skill security-scanner-w020316
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-scanner
Source: https://github.com/w020316/Khazix-Skills/tree/main/security-scanner
Command: npx skills add https://github.com/w020316/Khazix-Skills --skill security-scanner-w020316

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill provides a quick and comprehensive security scan for web applications, detecting common vulnerabilities like information leaks, insecure headers, mixed content, and expired SSL certificates.

Core Features & Use Cases

  • Security Scan: Performs a thorough security scan on a specified web application URL.
  • Vulnerability Detection: Identifies common web application vulnerabilities and their severity levels.
  • Report Generation: Generates a structured report detailing the scan results and recommendations.
  • Use Case: When a user needs to ensure the security of a web application or assess its vulnerability status.

Quick Start

Perform a security scan on the website 'https://example.com' by saying "Perform a security scan on 'https://example.com'."

Frequently Asked Questions about security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a web application security scan to check for vulnerabilities?

To perform a web application security scan, provide your target URL to trigger vulnerability detection. The scan identifies common security flaws, assesses their severity levels, and generates a structured report with actionable recommendations.

What is security header analysis and how does it detect mixed content?

Security header analysis inspects HTTP response headers to ensure protective policies are enforced. Mixed content detection checks HTTPS pages for insecure HTTP resources, flagging vulnerabilities that expose web applications to man-in-the-middle attacks.

Can I check SSL/TLS certificate validity and cookie flags using Python 3?

Yes, you can check SSL/TLS certificate validity and cookie flags using Python 3. The scan operates entirely on the Python 3 standard library to validate SSL/TLS certificates and verify cookie flags without requiring external dependencies.

Does the web security scan work with Claude Code, Cursor, and OpenCode?

Yes, the web security scan works with Claude Code, Cursor, OpenCode, and Codex. It requires only the Python 3 standard library and operates seamlessly across these coding environments to detect web application vulnerabilities.

What's the best way to detect information disclosure vulnerabilities in web applications?

The best way to detect information disclosure vulnerabilities is to run a comprehensive security scan on your web application URL. This identifies sensitive data leaks and generates a structured report detailing severity levels and remediation steps.